1

I'm not talking about trying to crack the encryption key, but if malware got onto your computer, and attempted to brute force your router's login password. I know that the majority of people are using admin/password, but for those that aren't, do router's limit the number of login attempts? I only have one router to test, and it doesn't appear to restrict it. I was just wondering if anyone with more expertise with networking knew if there were security features to prevent this.

The only reason I could think of for doing this would be to keep persistent access in case of the malware being removed, once you have the credentials you can upload a malicious firmware, the router could launch attacks. Since the malware would already be on a computer behind the router, I couldn't think of another reason to infect it, except for maybe a botnet. I've heard of malicious firmware being used for stuff, but I doubt that much of the stuff littered across the internet would do something like this.

  • 1
    In my experience, many consumer-grade routers do not protect against this. – user3463 Aug 14 '12 at 5:08
  • Not on my Netcomm - its unlimited and there isn't even a time delay. I think your thinking of enterprise grade routers from Cisco. – Jeremy Thompson Aug 14 '12 at 5:54
  • Agree with Jeremy on this. Maybe you should rather look into Enterprise Solutions – David Murray Aug 14 '12 at 7:35
  • As per Randolph comments, some can - Cisco implement something called AOIP (anything over IP) (although I don't think AOIP is specific to Cisco). As the name implies, it means anything from any IP address is monitored/looked at etc (depending on the settings). I hope this helps. – Dave Aug 14 '12 at 7:46
0

I've done some searching with Google and everything I find (along with the comments on this question) indicates that consumer routers do not implement any preventive measures against login brute force attacks.

0

Even the most basic consumer routers have the ability to only accept connections from specified MAC Addresses. Setting up MAC Address Filtering should at least protect you from wireless hack attempts.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.